On the recordRead 4 Oct 202622 facts
OpossumUI
On the record
- Attribution review
- Users can create and edit attributions for individual files or groups of resources.github.com · read 4 Oct 2026
- Audit workflow
- The app provides a unified interface for browsing scanner evidence, navigating a codebase file tree, and creating attributions for files or groups.github.com · read 4 Oct 2026
- Core workflow
- It lets users explore software components, review licenses, and generate reports from open-source scans.github.com · read 4 Oct 2026
- Exports
- It exports SPDX documents as JSON or YAML, component lists as CSV, and follow-up documents for items flagged for legal review.github.com · read 4 Oct 2026
- File formats
- OpossumUI works with `.opossum` files and can directly import ScanCode JSON and OWASP Dependency-Check JSON files.github.com · read 4 Oct 2026
- File handling
- OpossumUI works with .opossum files containing license-compliance data that can be visualized and edited in the app.github.com · read 4 Oct 2026
- Imports
- It can directly import ScanCode JSON and OWASP Dependency Check JSON files; OSS Review Toolkit results can be converted using a reporter and imported.github.com · read 4 Oct 2026
- License
- The project states that OpossumUI is licensed under Apache-2.0 and its documentation under CC0-1.0.github.com · read 4 Oct 2026
- License expression limit
- SPDX license expressions are only partially supported; the README says the full applicable license text should also be entered in the license-text field.github.com · read 4 Oct 2026
- Linux caveat
- The README says Ubuntu 22.04 and later can have an AppImage sandboxing issue, with a documented --no-sandbox workaround.github.com · read 4 Oct 2026
- macOS caveat
- The README says the macOS app is not officially signed and must be explicitly allowed in System Settings.github.com · read 4 Oct 2026
- macOS signing
- The project says the macOS app is not officially signed and must be explicitly allowed in System Settings.github.com · read 4 Oct 2026
- Maintainer
- The GitHub organization identifies itself as opossum-tool and describes OpossumUI as a lightweight app for open-source license compliance audits and inventory.github.com · read 4 Oct 2026
- Notable limitation
- SPDX license expressions are only partially supported; the guide says the full license text should also be entered in the license-text field.github.com · read 4 Oct 2026
- Purpose
- OpossumUI helps explore open-source components, review licenses in codebases, and generate reports from open-source code scans.github.com · read 4 Oct 2026
- Scanner integrations
- It combines findings from multiple scanners and names OSS Review Toolkit and ScanCode as integrations.github.com · read 4 Oct 2026
- Security use case
- For blind intellectual-property audits during mergers and acquisitions, the project says only compliance-relevant metadata needs to be exposed in the app, without sharing source code.github.com · read 4 Oct 2026
- Source-code handling
- For blind audits, the project says the app can expose only compliance-relevant metadata without sharing source code.github.com · read 4 Oct 2026
